Lucene search
PRIOn knowledge basePRION:CVE-2018-11136HistoryMay 31, 2018 - 6:29 p.m.
Sql injection
2018-05-3118:29:00
PRIOn knowledge base
www.prio-n.com
3
The ‘orgID’ parameter received by the ‘/common/download_agent_installer.php’ script in the Quest KACE System Management Appliance 8.0.318 is not sanitized, leading to SQL injection (in particular, a blind time-based type).
| CPE | Name | Operator | Version |
|---|---|---|---|
| kace_system_management_appliance | eq | 8.0.318 |
Related
cve
cve
CVE-2018-11136
2018-05-31 18:29:00
nvd
nvd
CVE-2018-11136
2018-05-31 18:29:00
cvelist
cvelist
CVE-2018-11136
2018-05-31 18:00:00
coresecurity
coresecurity
Quest KACE System Management Appliance Multiple Vulnerabilities
2018-05-31 00:00:00
zdt
zdt
Quest KACE System Management Appliance 8.0 - Multiple Vulnerabilities
2018-06-01 00:00:00
packetstorm
packetstorm